Legal
Last updated 14 October 2026. Plain language first; the details follow.
The short version
- When you scan a Popcornture QR code and fill in the form, your details go to the sponsor named on that page — nobody else.
- You only share them if you tick the box. Marketing messages need a separate tick.
- We never sell personal data, and sponsors can never see each other’s leads.
- You can ask us to show you or delete your details at any time.
Who we are
Popcornture (“we”) runs branded popcorn campaigns at events in Nigeria and the website at this address. Questions about this policy: hello@popcornture.ng.
If you scanned a QR code on a popcorn pack
What we collect
- What you type into the form — usually your name, email and phone number, and any extra questions the sponsor asks.
- Your consent choices, with the exact wording you agreed to and when.
- When you scanned and visited, and the type of device and browser (for example “Android, Chrome”).
- Your approximate country and city, as reported by our hosting network. We do not store your IP address.
- A random identifier in a first-party cookie, so a second scan from the same phone isn’t counted as a new person. It isn’t used to track you on other websites.
Who gets it, and why
The sponsor named on the page receives the details you submit, so they can do what the consent box says — follow up with you about their products and services. Popcornture processes the data on the sponsor’s behalf. If you also tick the marketing box, the sponsor may send you news and offers, and you can unsubscribe whenever you like.
Sponsors see aggregate statistics (numbers of scans, visits and leads by time and device). Individual scan records are never linked to your name unless you submit the form.
Legal basis
Your consent, given by ticking the box before you submit. You can withdraw it at any time; withdrawing doesn’t affect anything that happened before.
How long we keep it
For as long as the sponsor’s campaign account is active and no longer than 24 months after the event, unless you or the sponsor ask us to delete it sooner. Erased leads are anonymised so campaign totals stay accurate without keeping anything that identifies you.
Your rights
You can ask for a copy of your details, ask us to correct or delete them, or withdraw consent. Use the data request form — we’ll confirm it’s you by email and act across every campaign at once.
If you’re a sponsor
We collect your company details, your team’s names and email addresses, and your booking history to run your account and campaigns. Payments are processed by Paystack; we never see or store card details. We use your contact details to send booking, production and account messages.
If you’re browsing this website
We use only the cookies the site needs: a session cookie when you sign in, a booking cookie while you complete a booking, and the visitor cookie on campaign pages described above. We don’t use advertising trackers.
Security
Data is encrypted in transit, stored with providers that encrypt it at rest, and separated by sponsor at the database level, so one company’s account can never read another’s leads. Staff access is limited by role and important actions are recorded in an audit log.
Where data is stored
Our hosting and database providers may store data outside Nigeria. Where they do, we rely on safeguards recognised under the Nigeria Data Protection Act 2023, such as contractual commitments to protect it.
Complaints
If you’re unhappy with how we’ve handled your data, tell us first at hello@popcornture.ng and we’ll try to fix it. You also have the right to complain to the Nigeria Data Protection Commission.